Timeline for What are the real physical risks of casual social media publishing?
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Apr 22, 2018 at 23:51 | history | edited | Limit | CC BY-SA 3.0 |
grammar and spelling; broke the second paragraph into two, since they seem to be on different topics
|
| S Apr 22, 2018 at 23:51 | history | suggested | Mathieu K. | CC BY-SA 3.0 |
grammar and spelling; broke the second paragraph into two, since they seem to be on different topics
|
| Apr 22, 2018 at 23:06 | comment | added | Mathieu K. | There are banks that use emails for password recovery? What?! | |
| Apr 22, 2018 at 23:05 | review | Suggested edits | |||
| S Apr 22, 2018 at 23:51 | |||||
| Apr 22, 2018 at 16:20 | comment | added | WoJ | @anaximander: yes, this is a very good point indeed. | |
| Apr 22, 2018 at 16:18 | comment | added | anaximander | @WoJ Even assuming that stealing your money is near-impossible, that's not the only threat. If you have order confirmations in your email, the attacker knows when you buy expensive things, and can log in as you to get them delivered elsewhere. If you have booking confirmations, they know when you're away from home so your house is safe to rob. They can send emails from your account, impersonating you in ways that might damage your reputation, risk your job, implicate you in crimes... yes, many of these things can be corrected in time, but until they they will cost money and ruin your life. | |
| Apr 22, 2018 at 9:57 | comment | added | WoJ | @HagenvonEitzen: the idea is that the bank can show that I usually connect from the pool of my ISP and the wire transfer I am disputing also comes from the same set (and was assigned to me at that time). This is in contrast with someone suddenly transferring 10k€ from a remote country (which would be a reason to revert the wire despite the fact that it was done with my credentials) | |
| Apr 22, 2018 at 9:21 | review | First posts | |||
| Apr 22, 2018 at 10:07 | |||||
| Apr 22, 2018 at 3:57 | comment | added | Hagen von Eitzen | @WoJ How does "The IP is my usual one" work if your IP changes ever so often? | |
| Apr 20, 2018 at 21:55 | comment | added | WoJ | @anaximander: this is a huge inconvenience but not a threat. In France (where I live), the customer is very much protected against these thefts (legavox.fr/blog/maitre-joan-dray/… - in French). In particular, the bank must prove that the wire was "very probably" from me, usually by showing that the IP is my usual one (the wire being sent from my account is not enough). But it is true that this is the case in France, maybe not elsewhere. | |
| Apr 20, 2018 at 20:12 | comment | added | mylogon | @anaximander Indeed. I gave a talk at a local OWASP gathering very much about this. It was along the lines of 'app developers are shit' and your password for everything is stored in plain text somewhere and blam - your bank account is empty. | |
| Apr 20, 2018 at 18:29 | comment | added | anaximander | Gaining access to your online banking - or the email account that your bank will send password reset emails to, which amounts to the same thing - is not a soft threat. It is a "someone will use this to take all your money" threat. | |
| Apr 20, 2018 at 12:21 | comment | added | WoJ | Thanks - but this would rather fall into the "soft threats" category I mentioned in my question. I am looking for (broad) physical security risks. | |
| Apr 20, 2018 at 12:08 | history | answered | Fon Korn | CC BY-SA 3.0 |